critical9.8
CVE-2021-31635
jFinal Server-Side Template Injection vulnerability
Impact
Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.jfinal:jfinal | <= 4.9.08 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfinal | Jfinal | Version 4.9.08 |